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Lesson “Welcome” Slide 1 “Welcome” 



Lesson 1 -Introduction to the 
Business Records (BR) FISA 
Lesson 2 -Reasonable Articulable 
Suspicion (RAS) 

Lesson 3 - First Amendment 
Considerations 

Lesson 4 - The BR FISC Order 
Lesson 5 -Accessing, Sharing, 
Dissemination, and Retention 



(U//POUO) Welcome to the Business 
Records (BR) FISA web-based 
training (WBT). 



Derived From: NSA/CSSM 1-52 
Dated: 20070108 
Declassify On: 26341 00T 
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(T3//3WNr>-This course provides 
training for analysts who will be 
authorized to query the raw metadata 
collected by the BR FISA. 



(U//F©tt©tThe course is comprised of 
five Lessons. 

(T3//9 l iVN F ) - T he lessons contained in 
the BR FISA course are: 

• Lesson 1 -Introduction to the 
Business Records (BR) FISA 

• Lesson 2 -Reasonable 
Articulable Suspicion (RAS) 

• Lesson 3 - First Amendment 
Considerations 

• Lesson 4 - The BR FISC Order 

• Lesson 5 -Accessing, Sharing, 
Dissemination, and Retention 





Lesson "Welcome" Slide 2 “Lesson Titles and Lesson objectives 1 



. 



(UZ/FOUO) The course begins with an 
overview of the BR FISA authority and 
then moves into an overview of the 
Reasonable Articulable Suspicion 
standard. Next, students will explore 
First Amendment considerations 
before taking a closer look at the BR 
FiSC Order. The BR Order points out 
special considerations that distinguish 
this FISA authority from other FISAs 
typically encountered at this Agency. 
The final lesson of this course 
provides specific rules and procedures 
regarding the access, sharing, 
dissemination, and retention of BR 
FISA metadata. 
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Lesson “Welcome", Slide 3 Course Objectives 



At the conctusion of this course you 
should be able to: 






WmMmt 






•Identify terms and processes associated with the 
Business Records FISA 

•Identify common sources of information used for 
determining RAS 

•State limitations for targeting US persons under the 
RAS standard 

•Identify access, sharing, dissemination, and retention 
procedures under the BR FISA Order 



•Identify terms and processes 
associated with the Business Records 
FISA Order 

•identify common sources of 
information used for determining RAS 
• State limitations for targeting US 
persons under the RAS standard 
•Identify access, sharing, 
dissemination, and retention 
procedures under the BR FISA Court 
Order 








Business ReCOrjMISA / Business Records (BR) FISA 



~ "-“Course Welcome: 



Lesson Welcome f Slide 4 “Legal Readings Access 



(U/ /r0UQ) A s you progress through 
the different course lessons you may 
want to also access the related Legal 
Readings. The two core readings are 
the Reasonable Articulable Suspicion 
(RAS) memorandum written by QGC 
and the BR FISC Order issued by the 
FISA Court. 



(U/ /rQUQ) You can access these 
documents by clicking on the Legal 
Readings button located in eCampus. 
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Lesson 1 Slide 1 Introduction and Definitions 



BR FISA = Specific authority given by 
the FISA Court (FISC) that allows NSA 
to obtain metadata from the business 
records of certain specified 
telecommunication companies. 



-f ro//o i //Nr) The Business Records (BR) 
FISA is a specific authority given by the 
Foreign Intelligence Surveillance Act Court 
(FISC) that allows NSA to obtain metadata 
from the business records of certain 
specified telecommunication companies. 

■ (TO//G I //NO T his data consists of telephony 
metadata obtained from business records 
provided under a court order by US 

JQJpu. 
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Lesson 1 - Introduction to the Business 
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• Identify the purpose of the BR 

FISA 

•Recognize the 

groups covered by the 
BR FISA Order 

^Define terms relevant to the BR 
FISA Order: telephony metadata, 
telephony identifier, hops, and 
Seed 



(TS//SI//NF) - T his lesson will enable 
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•Identify the purpose of the BR FISA 
•Recognize the 

groups covered by the BR FISA Court 
Order 

•Define terms relevant to the BR FISA 
Order: telephony metadata, telephony 
identifier, hops, and Seed 
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Lesson 1 Slide 3 Overview of RAS 



(U//F OBQ) Before we begin, you will need 
to understand some key terms. To 
access a vocabulary list please use the 
legal readings link on the right side of the 
page and open the BR Glossary. Let’s 
review a few of the terms you’ll use in this 
course now. 

(TS//S1//HF > The term associated is 
defined to mean “engaged in a common 
enterprise” with: 



Overview of RAS 



The term associated is defined in the RAS Memo to 
mean, j engaged in a common enterprise ” with: 



listed in the Order or 
The BR FISA Order list specific 
groups that are known to be 



These 

are groups designated by the 
National Counter Terrorism Center 
(NCTC) to have allied them selves 
with [1]. 

No other groups other than those 
listed in the BR FISC Order can be 
used to justify access under the BR 
FISA authority. This list can be 
obtained from a Homeland Mission 
Coordinator (HMC). Because the 
FISC Order is typically renewed 
every 60-90 days, the list of terrorist 
groups is subject to change. 



One of the groups designated by the National 
Counter Terrorism Center (NCTC) to have allied 



Someone acting as their agent 



No other groups other than those listed in the BR 
FISC Order can be used to justify access under 
the BR FISA authority. 



: [I] The NCTC list also 
identifies known aliases for groups listed in 
the Order 





(T0//0I//NO Here’s the definition of 
telephony metadata which you will 
need throughout this course. 



Lesson 1 Slide 4 “Telephony Metadata and Telephony identifiers’ 



tT3'//01//i l 'ir)-The Telephony Metadata 
obtained from the BR FISA is 
comprehensive communications 
routing information. Specifically it may 
contain:: 

• Originating and terminating 
telephone numbers 

• International Mobile Subscriber 
Identity (IMSI) numbers 

• Mobile Subscriber Integrated 
Services Digital Network 
(MSISDN) numbers 

• International Mobile station 
Equipment Identity (IMEI) 
numbers 

« Trunk identifiers 

• Telephone calling card numbers 

• Time and duration of calls 



“Telephony Metadata and Telephony Identifers” 

Telephony metadata 

Metadata collected - includes comprehensive communications routing 
information 

• Originating and terminating telephone numbers 

• International Mobile Subscriber Identity (IMSI) numbers 

• Mobile Subscriber Integrated Services Digital Network (MSISDN) 
numbers 

° International Mobile station Equipment Identity (IMEI) numbers 
» Trunk identifiers 

• Telephone calling card numbers 

• Time and duration of calls 



Telephony metadata does NOT include 

• Substantive content of any communication 

* Name, address, or financial information about a subscriber or 
customer 



f FS//SI//NF) The BR FISA authority 
does not extend to the content of these 
communications. The BR FISA does 
NOT include substantive content of 
any communication, or the name, 
address, or financial information about 
a subscriber or customer. 



Telephony identifiers correlate to Business Records metadata collected by 
the providers, such as MSlSDN^oi^calling^ca^ 
identifiers are also known as 



identifiers 



(S//S I //REL) T( 
also known as 
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(TS//SI//NF) A telephony identifier 
(selector), is caiied a Seed when it is 
being used to search the BR 
repository. When querying the BR 
metadata repository, Business 
Records FISA (BRF)-approved 
individuals, also known as BRF 
chainers, conduct contact chaining 
queries in 

order to obtain the contacts between a 
seed and other telephone identifiers 
(numbers in contact with the RAS- 
approved-Seed). 



RAS- 

approved 

Seed 



Selector 

One 



(T0//SI//1MF) Under the BR FISA 
Order, a query always begins with a 
RAS-approved-Seed. In this case the 
RAS-approved-telephone identifier is 
caiied a ‘Seed’ because it is being 
used for chaining and analysis to 
create a ‘tree’ of contacts and identify 
new potential terrorist associations. 



Second HOP 



Selector 

Two 



FISC authorizes third hop chaining, 

CT Policy limits chaining through 2 hops 



(T3//3I//Nr) The BR FISC Order 
authorizes “3-hop chaining”; however 
it is CT’sf.1] recommended practice to 
restrict chaining to two hops. This 
means that telephony identifiers up to 
two hops away from the Seed may be 
chained. Chaining reveals the 
contacts of the identifier. 



Quantity of 

contacts 

only 
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Lesson 1 - Introduction to the Business 
Records (BR) 
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Lesson 1 - Introduction to the Business 



P^PP ' Ssssfi|»®5i? •' ' ■ i • -V rr---^ 

Lesson 1 Slide 6 “Associations to establish a RAS nomination” 



I 



Associations to establish a RAS nomination 



3 Pick List 
2 



Associations to establish a RAS nomination 

Reasonable Articulable Suspicion (RAS) standard - requires that an NSA analyst 
must be able to point to a single fact that points to the fact that a selector may be 
associated with a terrorist group listed in the FISC Order before we are 
authorized to conduct analysis on it. 

RAS determination - should cause a reasonable person to suspect that the 
identifier is associated with one of the terrorist organizations named in the Order. 



Haac - i. f g 



■ fTS//8l//NF) Recall that the BR FISC 
Order allows NSA to obtain an 
immense amount of foreign and US 
metadata contained in the Business 
Records. The FISC Order contains 
strict guidelines on when this metadata 
is allowed to be accessed and when it 
is not. It must be associated with 
specific terrorist organizations named 
in the Order. It also must meet a 
standard that is referred to as the 
Reasonable Articulable Suspicion 
(RAS) Standard. In a nutshell, the 
RAS standard requires that an NSA 
analyst must be able to point to a 
single fact that points to the fact that a 
seed/telephone selector may be 
associated with a terrorist group listed 
in the FISC Order before we are 
authorized to conduct analysis on it. 

(TS//SI//N f-)-We will address the RAS 
standard in detail in the next lesson, 
but for now, understand that the fact or 
facts which make up a RAS 
determination should cause a 
reasonable person to suspect that the 
identifier is associated with one of the 
terrorist organizations named in the 
Order. 
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Lesson 1 Slide 7 “Legal Disclaimer’ 



(U// rOUO) This course is not 
designed to take the place of specific 
guidance from a Homeland Mission 
Coordinator (HMC), the Office of 
Oversight & Compliance (SV), or from 
the Office of General Counsel (OGC). 
The course is designed to enhance 
your understanding of how to comply 
with the BR FISC Order and to 
understand the RAS standards used in 
concert with BR FISA. 

(U// FOUO) Because, the BR FISC 
Order is renewed approximately every 
60-90 days, the FISC may change the 
authority or place new restrictions in a 
new FISC Order. It is important to 
understand that unique operational 
circumstances may result in a change 
in guidance from this course. 
Therefore, if you experience any 
uncertainty (delete) it is always sound 
advice to contact your local HMC, SV, 
or OGC for case-specific guidance. 



Legal Disclaimer 



Renewed approximately every 60-&Q days 

Contact your local HMC, SV, or OGC for case-specific guidance. 



UNCLASSIFIED//: 



Lesson 1 - Introduction to the Business 
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Records (BR) 
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UNCLASSIFIED//! 



IS NOT designed to lake the place of: 


!S designed to enhance understanding ut 


Homeland Mission Coordinator (HMC) 
Office of Oversight & Compliance (SV) 
Office of General Counsel (OGC) 


BR FISC Order 
RAS standards 
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Lesson 1 Slide 8 “Summary” 



(T3//3 I //1MF) You have now completed 
the lesson that discusses the BR 
FISA authority. 



Summary 

You should now be able to 



{TS//8 I //NF) You should now be able 



Identify the purpose of the BR 
FISA Order 
Recognize the 

groups covered by the 
BR FISA Order 

Define terms relevant to the BR 
FISA Order: telephony 
metadata, telephony identifier, 
hops, and Seed 



identify the purpose of the BR FISA 
Order 



Recognize the 

groups covered by the BR FISA 

Order 



Define terms relevant to the BR FISA 
Order: telephony metadata, telephony 
identifier, hops, and Seed 
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Lesson 1 - Introduction to the Business 
Records (BR) 
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(TS//C 1 //NF) This lesson provides an overview 
of the Reasonable Articulable Suspicion 
(RAS) Standard. RAS guidance is outlined 
in an OGC memo. It provides definitions 
and descriptions that will help you 
u n d e rsta n 

to ■ 

: ■identifiers under the BR Court Order. 



Recall that the BR FISA Order lists 
those specific terrorist groups that are 
associated with either 



BR FISA course lessons: 

Lesson 2 - Summary of the Standard 



You can access the most 
current BR Order from the links on the Legal 
Readings button in this course. 



fF 6 flGI//N F > The BR FISA Order also states 
that in order to access the BR FISA 
metadata, NSA must establish RAS on each 
selector that it wishes to query within the 
metadata. Only a Homeland Mission 
Coordinator (or named individual in the 
Order) may make a RAS determination and 
thus authorize a selector for querying. 
However, you are responsible for ensuring 
that a selector has been approved for RAS 
prior to querying the BR FISA metadata. 

You may even be responsible for drafting 
RAS requests outlining why a selector 
should be RAS approved. 



-Define the Reasonable Articulable Standard (RAS) used to 
justify a BR FISA metadata search 
•Identify 
to facts 
•Identify 
RAS 
•List the 



hunches in contrast 



information 



used for justifying a 



■ (TS//CI//NF) ‘This lesson will enable you to: 

• Define the Reasonable Articulable 
Standard (RAS) used to justify a BR 
FISA metadata search 

• Identify prohibitions against instinct 
and hunches in contrast to facts 

• List the common sources of 
information on which analysts rely in 
making RAS determinations 

• List the ten most typical sources of 
information on which analysts rely in 
making assessments of Reasonable 
Articulable Suspicion (RAS) 



information 



on which analysts 



common 

rely in making RAS determinations 
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; Summary of RAS Standard” 



(TG//G1//N You will recall from Lesson 
One that the BR FISA Order is authorized 
because the FISC recognizes there is a 
counterterrorism interest in obtaining those 
business records. However, because NSA 
is receiving a great deal of US person 
telephony records, we have strict 
guidelines on when NSA can access the 
metadata under this authority. One of the 
requirements is that in order to access the 
metadata, NSA must establish RAS on 
each selector prior to querying the BR 
FISA repositories. 



Summary of 

BR FISC Order 



RAS Standard 



Government may request to use specific identifiers to 
query the metadate for purposes of obtaining foreign 
intelligence through contact chaining or 



(T0//0I//NO T he BR FISC Order states 
that NSA may query specific identifiers 



that satisfy the RAS standard for 
purposes of obtaining counterterrorism 



Reasonable Articulable Suspicion standard 



intelligence. 



(TS//S I //NF) In order to assist in 
determining when a selector has satisfied 
the RAS standard, the Office of General 
Counsel (OGC) has issued a RAS Memo 
to help Signals Intelligence Directorate 
(SID) personnel make RAS determinations 
on telephone identifiers. The memo 
contains guidelines that apply to both the 
BR and Pen Register and Trap and Trace 
(PR/TT) FISA Orders. 



lesson 2: Reasonable Articulable Suspicion (RAS) 
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1 must be approved by the a Homeland Mission Coordinator or other named offical in tie 
FSSC Order before you use a telephone number identifier to query the database of records 

■ no hunches or guesses to justify targeting 



(TG//GI//NF ) In order to query the BR FISA 
metadata, BRF authorized individuals may only 
query selectors that have been RAS approved 
by a Homeland Mission Coordinator (HMC) (or 
other named officials in the FISA Order). A 
HMC determines, based on the factual and 
practical considerations of everyday life, 
reasonable and prudent persons act, whether 
or not there is a reasonable articulable 
suspicionthaUh^electon 

There must be at least one qualifying fact giving 
rise to a reasonable articulable suspicion that 
the identifier is associated with one of the 
terrorist groups listed in the BR FISA Order. f. 31 

(TG//Gl//Nr) The RAS must be approved 
BEFORE you can j\4] use an identifier to query 
the BR metadata. Analysts are not allowed to 
use a hunch or a guess to nominate selectors 
for RAS. RAS nominations or requests 
nominations must specify facts that would 
cause a reasonable person to form that 
suspicion. 

(U/ /rOUO) The RAS standard is far less than 
proof by “probable cause” or “a preponderance 
of evidence” - it merely requires one fact that 
can be articulated which would cause a 
reasonable person to form a suspicion. 
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f TO//G I //NI~) Searching the Business Records 
metadata is targeting, not analysis. 

- Therefore to make a RAS determination, 
other information sources must be used 
for research and analysis. Remember 
that the RAS standard is merely a reason 
for suspicion through one or more stated 
facts, so the standard is not as high as 
most FISC content surveillance 
authorities. 

(TS//SI//NF) Information used as a basis to 
satisfy the standard often comes from one 
of the following in-house resourcesf.21 : 

A published NSA report 
Unpublished SIGINT collection where 
new accounts have been revealed (and 
can be documented) 



Content analysis that references new 
identifiers in phone 
Election 
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Lesson 2 Slide 5 “Sources of Information” (End. 3) 



■ (TS//SI//NF) The RAS memo also lists other 
sources of information available for researching 
a RAS. These include but are not limited to: 
Published reports such as: 

• SIGINT reports 

• Investigations by the CIA or FBI 

• FISA surveillance data derived from other 
authorized targets 

• SIGDEV work tied to published information 
- Other transcripts 

(TS//S I //NF )- Looking at the !C and public sector 
(open source) L2] sources we use, these 
include: 

• The Federal Bureau of Investigation 

• The Central Intelligence Agency 

• The National Counterterrorism Center 



Sources of Information 



SIGINT reports 

Investigations by the CIA or FBI 
FISA surveillance dials derived from other 
authorized targets 

SIGDEV work tied to pu blished Information 
Other transcripts 



Published reports 
Preliminary investigations 
Full field ^investigations 
FISA surveillance 



Public records available on the internet, 
news papers or other public resources 1. 31 



SIGDE¥ work tied to published infor 



gm a ( Transcripts 



^lesson 2: Reasonable Articulable Suspicion (RAS) 


















•Define the Reasonable Articulable Standard (RAS) used to 
justify a BR FiSA metadata search 

•Identify prohibitions against instinct and hunches in contrast to 
facts 

•Identify common sources of information used for justifying a 
RAS 

•List the common sources of information on which analysts 
rely in making RAS determinations 



J K 



Identify common sources of 
information used for justifying a RAS 
List the common sources of 
information on which analysts rely in 
making RAS determinations 
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(TOtfOWNH This lesson is a 
continuation on the Reasonable 
Articulable Suspicion (RAS) standard 
guidelines. 



(TS//S I //N l~) RAS determinations are 
approved by a HMC (or an official 
named in the Order) BEFORE queries 
can be made using a particular 
selector within the BR metadata. 
Another restriction associated with 
RAS is the prohibition of making a 
RAS determination based solely on 
activities protected by the First 
Amendment. 



Lesson 3 - Hrst Amendment Considerations 

® List some basic protections of US persons 
provided by the First Amendment of the US 
Constitution. 



(TG//3 I //NF) At the conclusion of this 
lesson, you should be able to: 

■ List some basic protections for US 
persons provided by the First 
Amendment of the US 
Constitution. 

* Describe the prohibition against 
using First Amendment protected 
activities as the sole justification 
for RAS involving a US person (as 
defined in USSID SP0018). 



Describe the prohibition against using First 
Amendment protected activities as the sole 
justification for a RAS involving a US person 



D eri ve d fr om: H0A/C39M 1 - 52 
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Lesson 3: First Amendment Considerations 








Lesson 3 Slide 2 “The Five Protections of the First Amendment 
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Lesson 3: First Amendment Considerations 



mend 



(U//FOUO) The First Amendment of 
the US Constitution prohibits Congress 
from making any laws that would 
infringe on the free exercise of: 



Religion 
Speech 
The press 

Peaceable assembly 
To petition the government for 
redress of grievances 



(TS//S1//NF) Remember the RAS 
Memo clarifies the FISC’s prohibition 
of a RAS determination based solely 
on activities that are protected by the 
First Amendment. This applies when 
targeting a US person as defined in 
USSID SP001 8 or a person 
reasonably believed to be located 
inside the United States. 
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against international terrorism 






(TS//S I //N £)-NSA can use identifiers, after they have 
been approved for RAS, to query the BR metadata for 
counterterrorism threats to the homeland. The BR 
Court Order only authorizes contact chaining and 
queries within the metadata. 



"What are BR Orders?" 



SCI 90 days 



'What are BR Orders?" 



The authority is for collection of tangible things 
gathered by the FBI to protect the US against 
international terrorism. 



(TS//S I //NF) BR Orders allow NSA to obtain telephony 
metadata from US telecommunication companies, 
compelled to do so under a court order. This FISA 
Order requires specified telecommunication providers 
to share business records in the form of telephony 
metadata with the US government. 



(TS//S I //NF) The BR FISA authority is for collection of 
tangible things gathered to protect the United States 
against international terrorism. BR Orders are 
renewed approximately every 60-90 days. We will refer 
to the valid order as the FiSA BR Order. 

(TS//SI//NF) Since this authority is concerned only with 
metadata and no content of those communications, 
NSA has a lower burden of proof for targeting an 
identifier when compared to other FISA authorities. 



(TS//SI//NF) All that is required is that a selector meet 
the Reasonable Articulable Suspicion (RAS) standard 
that a selector is associated with a terrorist group 
listed in the BR FISA Order. All of the listed terrorist 
3 roups are associated with 



■ The RAS standard requires an ability to 
articulate an association with 

terrorist 

groups listed within the order. 



(TS//3I//NF) All identifiers are approved by an HMC (or 
official named in the Order) prior to querying the 
authorized repositories. 
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"tangible things" 

"a/? e/ecfron/c copy of telephony metadata (call records)." 

• Comprehensive communications routing in formation including: 



• International Mobile subscriber identify (I MSI} number 

* international Mobile station Equipment Identity (1MEI) number 

* The trunk identifier 

* Telephone calling card numbers 

* Time and duration of cail 

The telephony metadata does not include tie substantive content of any communication or the name, 
address, or financial information of a subscriber or customer within these. 




(TO//OWNF ) The BR Order clarifies 
“tangible things" to mean an electronic 
copy of telephony metadata {call 
records). This includes: 

■ Comprehensive communications 
routing information including: 

• Originating and terminating 
telephone number 

• International Mobile 
Subscriber Identity (IMS!) 
number 

• International Mobile station 
Equipment Identity (IMEI) 
number 

• The trunk identifier 

• Telephone calling card numbers 

• Time and duration of call 



- fTS//SI//NF ' ) The BR FISA Order 
specifically states that the telephony 
metadata does not include the 
substantive content of any 
communication or the name, address, 
or financial information of a subscriber 
or customer within these. The FISA 
Order deliberately restricts access to 
only communications metadata. 
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Lesson 4 Slide 4 “Affiliation with Foreign Power” 
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'Affiliation with Foreign Power* 




RAS {Reasonable Articulable Suspicion) 

• Justifies the search of metadata 

• a statement of fact that supports a reasonable 
suspicion that the identifier is affiliated with 
one of the terrorist groups listed in the BR 
FISA Order. 



— 
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-( T6//6 1 //NF) The metadata obtained from 
the BR FISA authority is used to establish 
connections with terrorist organizations by 
using contact chaining and 

queries. These queries look at 
the contacts of known terrorists to help 
NSA establish new connections and 
affiliations with terrorist groups listed in the 
court order (i.e. the Foreign Powers). 

(TS//SI//N F)- Before searching the BR 
metadata repository, NSA must establish 
RAS on each selector in order to conduct a 
search within the metadata. RAS is a 
statement of fact that supports a 
reasonable suspicion that the identifier is 
affiliated with one of the terrorist groups 
listed in the BR FISA Order. Only 
Homeland Mission Coordinators and 
others named in the BR FISA Order can 
make a RAS determination. 

(TG//G I // NF) Remember, the RAS cannot 
be solely based on activities which are 
protected by the First Amendment of the 
US Constitution. 

■■(TS//SI//NF) To see samples of RAS 
statements please open the, ‘RAS 
statements’ Job Aid located in the legal 
readings for this course 
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Lesson 4 Slide 5 “ Summary " 



" 



Identify BR FISC orders as NSA's 
authorization to collect telephony 
metadata from specified US 
telecommunication companies in 
order to protect against 
international terrorism 



Identify BR FISC orders as NSA’s authorization to collect 
telephony metadata from specified US telecommunication 
companies in order to protect against international 
terrorism 
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(TG//G I //NO In this lesson we will 
continue to examine the Business 
Records (BR) FISA Court (FISC) 
Order. At the conclusion of this lesson 
you will be able to: 



Lesson Objectives 



In this lesson we will continue to examine the Business Records (BR) 
FISA Court (FISC) Order. At the conclusion of this lesson you will be 
able to: 



Distinguish between analysts 
authorized to query BR FISA 
metadata and individuals 
authorized to receive results of 
those queries 



a Distinguish between analysts authorized to query BR FISA 
metadata and individuals authorized to receive results of those 
queries 



Identify further limitations on 
accessing, sharing, disseminating 
and retaining BR FISA metadata 



° Identify further limitations on accessing, sharing, disseminating, 
and retaining BR FISA metadata 
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■ (TS//SI//NF) The Director of NSA 
P (DIRNSA) strictly controls access to 
m and use of raw BR metadata. 



(TS//SI//NT) Query access to BR raw 
metadata is limited to individuals 
trained and designated as BR FISA 
Query Analysts. This is the only group 
permitted to query raw BR FISA 
metadata for contact chaining and 
purposes. The BR 
FISA Order limits the number of 
individuals who can be named in this 
category as well as how many can be 
designated as Homeland Mission 
Coordinators. There are several other 
categories of people who are 
authorized to access the raw metadata 
such as technical individuals and Data 
Integrity BR FISA Analysts; those who 
access the repository for the purpose 
of ensuring that the data is compliant. 



Dissemination, and Retention L5S2 



The BR FISA Query Analyst 

The Director of NSA (DIRNSA) 
strictly controls access to and use of 
raw BR metadata. 



‘The BR Analyst’ 



TtiB Director of NSA (DiRNSA) striciiy controls access to and use of raw BR metadata. 






“The BR Analyst” 

Query access to BR raw metadata is limited to individuals trained and designated as BR 
FISA Query Analysts. 



Query access to BR raw metadata 
is limited to individuals trained and 
designated as BR FISA Query 
Analysts. 



(TS//SI//NF) The BR metadata is 
authorized to be stored in two NSA 
repositories — 



Authorized Query Analysts are 
permitted to query BR raw metadata 
within 

to receive query results. 



The BR metadata is authorized to 



“The BR Analyst’ 



The BR metadata is authorized to be stored in two NS 



stored in two NSA repositories 
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Distributing BR FISA query results 



(TSffOW Nf) It is the BR FISA Query 
Analyst's responsibility to ensure that 
the recipient of the query results is 
approved to receive BR derived 
information. 



It is the BR FISA Query Analyst’s responsibility to ensure that the recipient of the query 
results is approved to receive BR derived information. 
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(T6// 6I //W F) Remember only a select 
number of analysts are authorized to 
query the raw metadata. 



(TS//S l //NR -When distributing BR 
FISA query results the distributions are 
categorized as thosefetecogh 
which will be called ‘Sparing’ and 
those outside of NSA which will be 
called 'Dissemination'. 







Lesson 5: Accessing, Sharing, Dissemination, and Retention L5S5 



(U//F0W©) Before we discuss 
distribution, it is important to define 
query results. So, what are query 
results? 



Definition of query results 



fT~G//Q I //Nr) A “query result” is a piece 
of information that would not have 
been known, or a statement of fact or 
opinion that would not have been 
made, but for information revealed 
following a BR or Pen Register and 
Trap and Trace (PR/TT) query using a 
RAS (Reasonable Articulable 
Suspicion) -approved selector. 



This definition includes information 
in the form in which it appears 
immediately followincy^^or 

PR/TT query, 

well as information^^ffi^ 
changed form, e.g., a statement 
describing certain links in a 
contact chain. Summaries derived 
from BR chaining are also query 
results. 

This definition makes no 
distinction between minimized and 
unminimized information. 
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Lesson 5: Accessing, Sharing, Dissemination, and Retention L5S6 



(TS/ZSl/Nf) Sharing of BR FISA query 
results can take place formally or 
informally and may take place orally or in 
writing. Sharing can even include a phone 



Sharing 



Procedures 



(TS//S1//NF) So, when do the restrictions 
on the sharing of query results cease to 



(TS//S1//NF) The term “query result” does 
not govern properly disseminated SIG1NT 
products containing information derived 
from authorized queries of the BR or 
PR/TT metadata. 



Sharing Procedures 



■ fF6//Sl//NF) The term “query result” does 
not extend to identifiers discovered as a 
result of authorized queries of the BR or 
PR/TT metadata, to the extent those 
identifiers are used for tasking purposes 
elsewhere. E.g., a foreign identifier 
discovered as a result of an authorized BR 
query may be tasked in and 

neither the tasking information contained in 
nor the collection that results 
would continue to require the sharing 
restrictions applicable to BR query results. 
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(TS//S I //NF) The person who ts 
sharing a query result is responsible 
for ensuring that the recipient is 
authorized to receive it. To see your 
current responsibility please refer to 
the job-aid entitled BR FISA Query 
Analyst Responsibilities. 



You are responsible for following current Order's rules when sharing 

BR FISA query results 



H G//G I //N ~ 7 Individuals who receive 
BR derived information (query results) 
must be briefed by the OGC and have 
current OVSC1 800 training. They will 
be authorized by SID Office of 
Oversight and Compliance SV4 to 
receive BR query results. Remember 
authorization to receive query results 
does not authorize access to BR raw 
metadata. 
















If any BR FISA derived metadata is to be shared or 
coordinated beyond the personnel who are approved to 
receive it, contact the Office of Oversight and Compliance or 
the Office of General Counsel BEFORE you share! 
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The Court Ordered procedures for disseminations of 
query results apply from USSID SP0018. In addition, 
there are a couple of unique requirements: 

1 . Chief SI 2 or the NSOC SOO (or one of the three other 
named positions in the BR FISA Order) must approve 
the dissemination of US person information 

2. Any US person information disseminated must be for a 
counterterrorism purpose and necessary to understand 
the counterterrorism information or assess its 
importance. 



1. The Chief of SI 2 (or approved 
officials named in the court order) 
or the National Security 
Operations Center Senior 
Operations Officer (NSOC SOO) 
must approve the dissemination of 
US person information, (please 
refer to the glossary for a definition 
of dissemination) 

2. Dissemination of US person 
information must be for a 
counterterrorism purpose and oniy 
if necessary to understand or 
assess the counterterrorism 
purpose. This applies to both BR 
FISA Query analysts and 
individuals who have received 
query results. 

3. Further, all disseminations must 
be reported in a weekly report to 
the FISC. 
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Lesson 5: Accessing, Sharing, Dissemination, and Retention L5S10 



£ ¥&//6 l iW F^ Retention of raw 



metadata, chain summaries, and 
query results is limited to 5 years 



Retention 



(TS// SI //NF) This applies to all 
repositories holding BR FISA 
metadata. 



Retention of raw metadata, chain summaries, and query results is limited to 5 years 
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Distinguish between analysts authorized to query 
BR FISA metadata and individuals authorized to 
receive results of those queries 

Identify further limitations on accessing, sharing, 
disseminating, and retaining BR FISA metadata 



Distinguish between 
analysts authorized to 
query BR FiSA metadata 
and individuals 
authorized to receive 
results of those queries 
identify further limitations 
on accessing, sharing, 
disseminating, and 
retaining BR FISA 
metadata 
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“Where do we go from here?” L5S12 



Homeland Mission Coordinators: 
DL S2I41_HMC (ALIAS) S2I5 

Oversight and Compliance: 
SV4 DL_SV42 

General Counsel: 

‘go go’ or 



(T6//S1//NF) If you have not already 
done so, please read the BR Order 
and RAS Memo located in the Legal 
Readings icon. Then proceed to the 
Final Exam to take the test. After you 
have completed the test, to gain 
access to the metadata, SV4 will need 
to review and approve your access. 

(U// FOUO ) As always, it is important 
to remember that your Homeland 
Mission Coordinator, Oversight and 
Compliance, and the Office of General 
Counsel are available to answer any 
specific questions you may have 
relating to these authorities. 
Remember that this is the BR FISA 
course and does not replace training 
on other FISA authorities. 

Here are some contacts: 

Homeland Mission Coordinators: 

DL S2I41_HMC (ALIAS) S2I5 
Oversight and Compliance: 

SV4 DL_SV42 
General Counsel: 

‘go gc’ or 
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